Skip to content
OpenAdvisories
Unscored DSA-2710-1 4 CVEs

xml-security-c - several

Published Jun 18, 2013 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 6.0 xml-security-c 1.5.1-3+squeeze2
Debian · 7 xml-security-c 1.6.1-5+deb7u1

Vulnerabilities 4

  • Unscored —
    CVE-2013-2153

    The XML digital signature functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml…

    xml-security-c Debian
  • Unscored —
    CVE-2013-2154

    Stack-based buffer overflow in the XML Signature Reference functionality (xsec/dsig/DSIGReference.cpp) in Apache Santua…

    xml-security-c Debian
  • Unscored —
    CVE-2013-2155

    Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 does not properly validate length values, which…

    xml-security-c Debian
  • Unscored —
    CVE-2013-2156

    Heap-based buffer overflow in the Exclusive Canonicalization functionality (xsec/canon/XSECC14n20010315.cpp) in Apache …

    xml-security-c Debian